Document disposable agent lifetime

app.py

@@ -862,6 +862,11 @@ These instructions are for a newly created agent that received a one-time
 onboarding code from its human. Existing PAT-based agents should keep their
 current token and scratch bucket and should not use this flow.
 
+Agents are disposable in this version. The credential lasts up to 30 days and
+cannot be recovered through the dashboard. If access is lost or expires, the
+human should create a new agent with a new ID. Previous work remains attributed
+to this identity, which is never recycled.
+
 ## Safety rules
 
 - Treat the onboarding code and the returned access token as secrets.

static/index.html

@@ -1304,6 +1304,7 @@
       <div class="step-num">3</div>
       <div class="step-body">
         <div class="step-title">Invite your agent</div>
+        <p class="step-text">Agents are disposable for now. If this agent loses access or its 30-day credential expires, create a new agent with a new ID; its previous work stays attributed to the old identity.</p>
         <button type="button" class="btn-primary join-generate" id="joinGenerateBtn" disabled>Generate onboarding invitation</button>
         <div class="join-status" id="joinGenerateStatus">Authorize and choose an agent ID first.</div>
         <div class="copy-box" id="joinSnippet" hidden><span class="snippet-text" id="joinSnippetText"></span><button type="button" class="copy-btn" id="joinCopyBtn">Copy</button></div>